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(54) PROGRAM PERFORMANCE CONTROLLER 

(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a means for 
easily assuring security at the time of performing a 
downloaded program. 

SOLUTION: A program performing device 300 
mounted on a portable telephone set acquires a 
performance program 101 to which performance time 
the function information 102 declaring a function to 
be used is added from a communication passage, and 
allows a program interpretation performing part 301 
to successively execute the performance program. At 
the time of performing the performance program 101, 
the program performing device 300 stops the 
performance when the sue of any function included in 
a user inhibition table 304 indicating any function 
whose use is inhibited is declared by the performance time use function information 102. Also, 
the program performing device 300 monitors an instruction to be performed the next during 
the performance of the performing program 101, and stops the performance when the use of 
any function used by the instruction is not declared by the performance time use function 
information 102. 
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CLAIMS 



[Claim(s)] 

[Claim l] It is carried in the device and the program to which the use functional information 
which shows the function which oneself uses among the functional groups using the specific 
resource of said device was added is acquired. An acquisition means to be the program 
execution control unit to perform and to acquire a program firom a channel, An activation 
means to perform the acquired program, and a judgment based on said use functional 
information are made. The program execution control unit characterized by having the means 
for stopping which stops the program execution by said activation means in a case 
predetermined [ showing the decision result of program execution being unsuitable ]. 
[Claim 2] Said program is that to which said activation means executes the instruction in said 
program including two or more instructions. Said means for stopping The instruction which 
becomes a degree in the program under activation for activation is supervised. The program 
execution control unit according to claim 1 characterized by stopping said program execution 
by said activation means when it is the instruction which uses the function by which said 
instruction is not shown as a fiinction used in said use functional information among said 
functional groups. 

[Claim 3] It is the program execution control unit according to claim 2 which said use 
functional information is enciphered and is characterized by said means for stopping decoding 
and referring to said use functional information. 

[Claim 4] It is the program execution control unit according to claim 1 said program execution 
control unit has a prohibition functional storage means memorize the prohibition functional 
information which shows the function forbid use, and carry out [ stopping the program 
execution by said activation means, when the function of forbidding the use said means for 
stopping is indicated to be to said prohibition functional information is shown as a function 
use it to said use functional information, and ] as the description. 

[Claim 5] The program execution control unit according to claim 4 characterized by including 
the function of radio in the function to forbid the use which said prohibition functional 
information shows, at least. 

[Claim 6] The program execution control unit according to claim 4 characterized by including 
the function of the data output from an output device in the function to forbid the use which 
said prohibition functional information shows, at least. 

[Claim 7] The program execution control unit according to claim 4 characterized by including 
the function of the data acquisition from an input device in the function to forbid the use 
which said prohibition functional information shows, at least. 

[Claim 8] Said program execution control unit is a program execution control unit given in 
any 1 term of claims 4*7 characterized by having a prohibition functional modification means 
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to receive actuation of a user and to update said prohibition functional information further 
according to said actuation. 

[Claim 9] An acquisition means to be the program execution control unit which acquires and 
performs the program which is carried in a Personal Digital Assistant equipped with the 
memory which has an individual humanity news field, and consists of two or more 
instructions, and to acquire a program fi:om a channel, An activation means to perform the 
acquired program, and the program under activation supervise the instruction which it is 
going to execute next. The program execution control unit characterized by having the means 
for stopping which stops said program execution by said activation means when said 
instruction is an instruction which performs data read-out from said individual humanity 
news field. 

[Claim 10] An acquisition means to be the program execution control unit which acquires and 
performs the program which is carried in a Personal Digital Assistant equipped with the 
memory which has an individual humanity news field, and consists of two or more 
instructions, and to acquire a program firom a channel. An activation means to perform the 
acquired program, and the program under activation supervise the instruction which it is 
going to execute next. The program, execution control unit characterized by having the means 
for stopping which stops said program execution by said activation means when said 
instruction is an instruction which performs the data store to said individual humanity news 
field. 

[Claim 11] An acquisition means to be the program execution control unit which acquires and 
performs the program which is carried in a Personal Digital Assistant and consists of two or 
more instructions, and to acquire a program from a channel, An activation means to perform 
the acquired program, and the program under activation supervise the instruction which it is 
going to execute next. The program execution control unit characterized by having the means 
for stopping which stops said program execution by said activation means when it is the 
instruction which calls the fiinctional manipulation routine to which said instruction is the 
fiinctional manipulation routine with which said Personal Digital Assistant is equipped, and 
communicates with the exterior of said Personal Digital Assistant. 

[Claim 12] Said fiinctional manipulation routine is a program execution control unit according 
to claim 11 characterized by being the functional manipulation routine which performs data 
transmission to the exterior of said Personal Digital Assistant. 

[Claim 13] An acquisition means to be the program execution control unit which acquires and 
performs the program which is carried in a Personal Digital Assistant and consists of two or 
more instructions, and to acquire a program firom a channel. An activation means to perform 
the acquired program, and the program under activation supervise the instruction which it is 
going to execute next. The means for stopping which stops said program execution by said 
activation means when said instruction is the functional manipulation routine with which 
said Personal Digital Assistant is equipped and it is the instruction which calls the functional 
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manipulation routine which performs data output from the output device with which said 
Personal Digital Assistant is equipped The program execution control unit characterized by 
having. 

[Claim 14] An acquisition means to be the program execution control unit which acquires and 
performs the program which is carried in a Personal Digital Assistant and consists of two or 
more instructions, and to acquire a program from a channel, An activation means to perform 
the acquired program, and the program under activation supervise the instruction which it is 
going to execute next. The means for stopping which stops said program execution by said 
activation means when said instruction is the functional manipulation routine with which 
said Personal Digital Assistant is equipped and it is the instruction which calls the functional 
manipulation routine which performs data acquisition from the input device with which said 
Personal Digital Assistant is equipped The program execution control imit characterized by 
having. 

[Claim 15] Said program execution control unit is a program execution control unit given in 
any 1 term of claims 1-14 further characterized by having a notice means to notify a user of 
the stopped purport when said program execution stops by said means for stopping. 
[Claim 16] Said program execution control unit is a program execution control unit given in 
any 1 term of claims 1- 15 further characterized by having a halt discharge means to receive 
the input by the user and to cancel a halt according to said input when said program 
execution stops by said means for stopping. 

[Claim 17] Program execution control processing in which the object program with which the 
use functional information which shows the function which oneself uses among the functional 
groups using the specific resource of said device in the device which has a program execution 
function was added is acquired and performed It is the record medium which recorded the 
control program made to perform. Said program execution control processing The acquisition 
step which acquires an object program from a channel, and the execute step which performs 
the acquired object program, The record medium characterized by having the halt step which 
stops activation of an object program in the predetermined case which makes a judgment 
based on said use functional information, and expresses that the activation whose decision 
result is an object program is unsuitable. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention relates to the technique for the security reservation in 
the case of downloading the application program for Personal Digital Assistants, and 
performing on a Personal Digital Assistant especially, about the technique which prevents the 
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damage by inaccurate program execution. 
[0002] 

[Description of the Prior Art] In order to realize a household-electricappliances device, the 
escape of the function of a Personal Digital Assistant ("henceforth a 
household-electric-appliances device etc."), etc. by making progress of communication 
technology, software skill, etc. into a background in recent years, the request of the researches 
and developments about distribution service of a program to the 
household-electric-appliances device by which CPU was incorporated is increasing. 
[0003] If a household-electric-appliances device etc. is equipped with the function 
corresponding to distribution service of a program, a household -electric -appliances device etc. 
can download the application program prepared for the server on an external network, and 
when required, it can perform the application program. Therefore, users, such as a 
1 household-electricappliances device, can use the function of the versatility added by 
download not only &om the function made firom the beginning by the 
household-electric-appliances device etc. but from after, for example, it enables a user to 
choose, download and use for arbitration the appHcation program which realizes the function 
which self desires etc. 

[0004] For example, various application programs, such as an application program of the 
function which related to a message and communication facility closely as an object of the 
distribution service to a Personal Digital Assistant, and an address book, a game, can be 
considered. The application program set as the object of distribution service is fundamentally 
created by the manufacturer who is manufacturing the household-electric-appliances device 
etc., its related company, etc. Moreover, also when created by ordinary program development 
persons and companies which received distribution of the tools it is incomparable to the 
development environment of the application program for specific devices from manufacturers, 
such as a household- electric- appliances device, etc., it thinks. 

[0005] In this way, an assumption of the case where the application program created by the 
person of a manufacturer and others is downloaded and used by sides, such as a 
household-electric-appUances device, needs to equip the household-electricappliances device 
with the function for security reservation. It is because it caimot say that there is nothing also 
when the appUcation program which may be unjustly changed by the person with the 
malicious application program created by the manufacturer etc. as a just thing so that 
actuation which is not desirable may be performed, and performs actuation which is not 
desirable by ordinary program development persons etc. is offered. 

[0006] As actuation by the appUcation program which is not desirable, there is actuation 
which updates fireely the data in the data storage area in a device, and read-out of the 
information (henceforth "individual humanity news") in connection with the privacy of the 
telephone number memorized inside in Personal Digital Assistants, such as a portable 
telephone, and a mail address and others, the call origination to the exterior, etc. can be called 
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actuation which is not desirable when it does not meet a user's intention. 

[0007] By the way, in fields, such as a personal computer, there is a device of the code verifier 
of a Java (trademark) virtual machine conventionally as structure which reahzes the security 
reservation at the time of activation of the apphcation program downloaded firom the Internet. 
Before it carries out interpretation activation of the Java class file which is an apphcation 
program, a code verifier inspects the format and instruction train, and while the downloaded 
Java class file performs according to static constraint or structure constraint, it guarantees 
not performing dangerous actuation. This code verifier is described in detail by "The Java 
Virtual Machine Specification" (Tim Lindholm, Frank YeUin work, Addison- Wesley, 1997). 
[0008] 

[Problem(s) to be Solved by the Invention] However, since inspection of the justification of the 
apphcation program by this code verifier is comphcated processing, it requires a great 
processing step. Therefore, in order to perform a Java class file, also at the lowest, expensive 
computer resources, such as CPU of high performance lOOMHz or more and an availabihty of 
the big memory of 2MByte(s) • 4MByte, are needed for a clock firequency. Since this is the 
excessive amount of resources for most household-electric-appliances devices etc. in current, it 
does not become the means of security reservation reahstic for a household-electric- appliances 
device etc. to have a code verifier. 

[0009] Then, this invention is made in view of aiming at the security reservation at the time of 
a household electric-appUances device etc. downloading the application program made into 
the object of distribution service towards the household-electric apphances device etc., and 
performing it, and aims a household- electric- app fiances device etc. at offering the program 
execution control unit which reahzes the security reservation at the time of downloading and 
performing an apphcation program by the comparatively simple approach so that it can apply 
to especially a Personal Digital Assistant. 
[0010] 

[Means for Solving the Problem] In order to solve the above-mentioned technical problem, the 
program execution control unit concerning this invention It is carried in the device and the 
program to which the use functional information which shows the function which oneself uses 
among the functional groups using the specific resource of said device was added is acquired. 
An acquisition means to be the program execution control unit to perform and to acquire a 
program firom a channel. It is characterized by having the means for stopping which stops the 
program execution by said activation means in the predetermined case which makes a 
judgment based on said use fiinctional information, and expresses that the decision result of 
program execution is unsuitable as an activation means to perform the acquired program. 
[OOll] Since the use fiinctional information which shows beforehand the fiinction which that 
program uses for a program by the above-mentioned configuration is added, it becomes 
possible by using this use fiinctional information to secure security by the comparatively 
simple approach. Namely, it can reahze [ whether the program uses the fiinction in which use 
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should be forbidden, and ] now by the configuration with simple detecting detecting that the 
program is altered and by referring to use functional information by comparing use functional 
information with actuation of an actual program. 
[0012] 

[Embodiment of the Invention] Hereafter, the program execution equipment which is the 

gestalt of operation of this invention is explained. 

<Configuration> drawing 1 is the block diagram of the program execution equipment 300 
grade concerning the gestalt of operation of this invention. 

[0013] The object program 100 performed in program execution equipment 300 and the 
program generation equipment 200 which generates an object program 100 are shown in this 
drawing besides the program execution equipment 300 with which a portable telephone is 
equipped. 

<Program generation equipment> program generation equipment 200 is equipment which 
generates the object program which added execution-time use functional information, and is 
the compiler and linker which operate on a computer. This object program means the program 
of the execute form which operates on program execution equipment 300, and is an 
apphcation program. In addition, about execution-time use functional information, it 
mentions later. 

[0014] Program generation equipment 200 has the function which generates execution-time 
use functional information in addition to a function equivalent to the conventional compiler 
and a linker, and in order to realize the function which generates execution-time use 
functional information, it is equipped with the function ID table 201 and the execution- time 
use functional information generation section 202. Drawing 3 is drawing showing the DS and 
the example of contents of a function ID table. 

[0015] A function ID table is a table which consists of a set of the group of a function ID 401 
and the library number 402. In the example of contents shown in this drawing, the Ubrary 
number [ function / ID / of 0x0001 1 6 is matched. Here, a function ID 401 is the identifier of 
each function which the object program which operates on program execution equipment 300 
uses. In addition, classification arrangement of each function in which the object program 
which operates on program execution equipment 300 as a premise on employment can be used 
is carried out beforehand, and suppose that the identifier is set to each. 

[0016] Moreover, the library number 402 is a number of the library program which can be 
called within an object program. That is, it is the number of the Ubrary program prepared on 
the program execution equipment 300 which is the operating environment of an object 
program. In addition, the function which can be used by library call has the data output 
function for example, to a wireless interface, the data output function to a display, the data 
output function to a voice output circuit, a data input function fi"om a wireless interface, a 
data input function from a carbon button, etc. In the example of contents of drawing 3 , the 
function which Function ID means is written in addition for convenience in a parenthesis. 
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[0017] After program generation equipment 200 generates an object program by the function 
equivalent to the conventional compiler and a linker, the execution-time use functional 
information generation section 202 generates the execution-time use functional information 
which shows the function which an object program uses, and adds to the object program by 
searching the Library program currently called in the generated object program, and obtaining 
a function ID in the Hght of the function ID table 201. 

[0018] Drawing 4 is drawing showing the DS and the example of contents of execution -time 
use functional information which are added to an object program. Execution -time use 
functional information is the information which matched the flag 502 which shows whether 
the object program which actually serves as an addition place of the information for every 
function ID is using it about aU the functions that an object program can use by library call. A 
flag 502 shows the purport which 0x00 does not use, and shows the purport which 0x0 1 uses. 
[0019] As for the example of contents of this drawing, for example, the function ID is not used, 
as for the function of 0x0001, but, as for the function of 0x0002, Function ID shows that it is 
used. The object program 100 generated by such program generation equipment 200 consists 
of an executive program 101 and execution-time use functional information 102, as shown in 
drawing 1 . Here, an executive program 101 is the usual object program itself, and 
interpretation activation is carried out on program execution equipment 300. 
[0020] An object program 100 is for example, a Java class file, and the execution-time use 
functional information 102 is placed as attribute information into a Java class file. In addition, 
a Java class file can add attribute information. Moreover, attribute information can set up an 
identification number and can define the contents according to the agreement between 
specific Java virtual machines. That is, it is possible to build a Java virtual machine so that 
the attribute information on a specific identification number can be interpreted. Moreover, by 
the specification of a Java virtual machine, the Java virtual machine which cannot interpret 
attribute information on the specific identification number is supposed that the attribute 
information is skipped. 

[0021] Here, when program execution equipment 300 acquired and performs an object 
program 100 and you load the execution-time use functional information 102 to memory, 
suppose that it is it what may be referred to by program execution equipment 300. 
It has <program execution equipment> program execution equipment 300 in a portable 
telephone, and it is equipment which acquires and performs an object program 100, and 
contains an operating system and a Java virtual machine. 

[0022] Program execution equipment 300 has the program interpretation activation section 
301, the use functional Monitoring Department 302, the execution-time use functional 
monitor Banking Inspection Department 303, the disable table 304, the execution-time use 
functional prohibition Banking Inspection Department 305, the monitor prohibition Banking 
Inspection Department 306, the user notification section 307, the program execution 
authorization judging section 308, the user prohibition assignment input section 309, and the 
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function ID table 310, as shown to drawing 1 . Each part of these programs interpretation 
activation section 301 others demonstrates the function by performing the control program 
with which the memory of a portable telephone was equipped fundamentally by CPU. 
[0023] Here, the program interpretation activation section 301 is the so-called interpreter 
which carries out interpretation activation of the executive program 101, and carries out 
interpretation activation of the Java class file serially like the conventional Java virtual 
machine fundamentally, however, the function as an interpreter usual in the program 
interpretation activation section 301 -- in addition, it has the function in which interpretation 
activation can be suspended, by receiving a notice of the execution-time use functional 
monitor Banking Inspection Department 303, the execution-time use functional prohibition 
Banking Inspection Department 305, or the monitor prohibition Banking Inspection 
Department 306 during interpretation activation of an executive program 101. 
[0024] While the program interpretation activation section 301 is carrying out interpretation 
activation of the executive program 101, the use functional Monitoring Department 302 
supervises the Java cutting tool code (henceforth "an instruction") which is going to be 
performed next, and when either tends to be used among the functions defined beforehand, it 
outputs the function ID about the function which was going to be used. That is, the use 
functional Monitoring Department 302 is notified of the instruction of the location which a 
program counter points out next, i.e., the instruction which it is going to execute next, from 
the program interpretation activation section 301 which is interpreting the executive program 
101 serially, and the function ID corresponding to the instruction obtains, and it outputs a 
function ID by performing monitor processing later mentioned with reference to the function 
ID table 310. 

[0025] The function ID outputted from the use functional Monitoring Department 302 and 
execution-time use functional information 102 carry out as an input, and the execution-time 
use functional monitor Banking Inspection Department 303 teUs interpretation activation of 
an executive program 101 to the program interpretation activation section 301 as stopping, 
when the function ID matched with the flag of the purport do not use it in the execution- time 
use functional information 102 is outputted firom the use functional Monitoring Department 
302. 

[0026] The disable table 304 is a table which recorded the information which shows [ which it 
has permitted using the function to the executive program 101 of the downloaded object 
program 100 about each of all functions that may be used for the apphcation program which 
operates on program execution equipment 300 / or or ] whether prohibition is carried out. 
[0027] Drawing 5 is drawing showing the DS and the example of contents of the disable table 
304, As shown in this drawing, a disable table is a table which consists of a set of a group with 
the flag 602 which shows [ to which use of the function shown by the function ID 601 and its 
function ID is permitted / or or ] whether prohibition is carried out. A function ID 601 assigns 
an identifier so that the function which niay be used for an apphcation program may be 

9 



JP,2002-041170,A 



classified and it may become each classified fiinction with a meaning, the fiinction 
corresponding to the library called firom an appUcation program is included in each of that 
fiinction, and the fiinction corresponding to a load instruction or store instruction is fiirther 
included in it. That is, the fiinction ID included in a fiinction ID table or execution-time use 
fiinctional information was altogether included on the disable table upwards, and the fiinction 
ID corresponding to a load instruction or store instruction is included in it. 
[0028] A flag 602 shows the purport which 0x00 forbids use, and shows the purport which 
0x01 permits use. In the example of contents shown in this drawing, for example as a thing 
corresponding to a load instruction The fiinction of the fiinction ID of 0x0101 which means 
data read-out fi-om an individual humanity news field, The fiinction of the fiinction ID of 
0x0102 which means data read-out firom a system area. As a thing corresponding to store 
instruction, the fiinction of the function ID of 0x0201 which means the data store to an 
individual humanity news field, and the function of the fiinction ID of 0x0202 which means 
the data store to a system area show that use is forbidden. In addition, an individual 
humanity news field and a system area are explained later. 

[0029] The execution -time use functional prohibition Banking Inspection Department 305 
moreover, by comparing these with reference to the execution-time use functional information 
102 and the disable table 304 When the same function ID as the function ID matched with the 
flag of the purport used in the execution-time use fiinctional information 102 is matched with 
the flag of the purport which forbids use in the disable table 304 It is told to the program 
interpretation activation section 301 that interpretation activation of an executive program 
101 is suspended. 

[0030] The monitor prohibition Banking Inspection Department 306 considers the fiinction ID 
outputted from the use functional Monitoring Department 302, and the disable table 304 as 
an input, and when the fiinction ID matched with the flag of the purport which forbids use in 
a disable table is outputted fi-om the use functional Monitoring Department 302, 
interpretation activation of an executive program 101 is told to the program interpretation 
activation section 301 as stopping. 

[0031] The user notification section 307 is controlled to display the purport which 
interpretation activation of the executive program 101 by the program interpretation 
activation section 301 stopped on the display of a portable telephone, and notifies a program 
execution halt to a user. The program execution authorization judging section 308 is what 
constitutes the user interface at the time of a halt of interpretation activation with the user 
notification section 307. When it controls so that the user notification section 307 displays the 
purport of a halt of interpretation activation of an executive program 101 on a display 
Assignment by the user of whether a halt of an executive program 101 is canceled or to end 
activation of an executive program 101 is received through the various carbon buttons of a 
portable telephone etc., and discharge of a halt or directions of termination is told to the 
program interpretation activation section 301 according to the assignment. 
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[0032] The user prohibition assignment input section 309 receives the input about 
modification of the contents of the disable table 304 &om a user through the various carbon 
buttons of a portable telephone etc., and updates the disable table 304 according to the input. 
When the user prohibition assignment input section 309 exists, a user can specify [ which it 
permits that a specific function is used by the downloaded application program / or or ] 
whether prohibition is carried out. 

[0033] Moreover, the function ID table 310 is a table of the same contents as the function ID 
table 201, and is a table which has the structure shown in drawing 3 . In addition, program 
execution equipment 300 has the function stored in the memory with which minded the base 
transceiver station, acquired namely, downloaded the apphcation program by communication 
link, and the portable telephone was equipped. 

[0034] Drawing 2 is drawing showing the relation between the portable telephone 320 
equipped with program execution equipment 300, and the object program for download. The 
object program 100 offered fi'om the program generator equipped with program generation 
equipment 200 for the purpose of downloading to a portable telephone is stored in the 
program storing server 250 which is the computer connected to the public network. The 
portable telephone 320 equipped with program execution equipment 300 can download the 
object program 100 stored in the program storing server 250 through the base transceiver 
station 260 by radiocommunicating with a base transceiver station 260. 

[0035] <Memory structure> Here, the memory which the application program which program 
execution equipment 300 performs can access is explained. Memory is divided into the 
individual humanity news field for recording individual humanity news, the system area for 
recording an operating system and information required for activation of an interpreter 
function, and other fields. 

[0036] Drawing 6 is drawing having shown the classification of the field in memory. As shown 
in this drawing, from the OxOOOOth street to a OxSFFF address is a system area, from the 
0x4000th street, to a OxTFFF address is an individual humanity news field, and memory is 
other fields fi'om the 0x8000th street to whose OxFFFF addresses are not a system area or an 
individual humanity news field, either. 

[0037] That is, with the application program built in the portable telephone fi-om the 
beginning, individual humanity news is recorded on an individual humanity news field, and 
program execution equipment 300 accesses a system area, and performs record and read-out 
of data required for activation of processing. Drawing 7 is drawing showing the example of the 
contents of individual humanity news. As shown in this drawing, individual humanity news 
includes the information in connection with the privacy of individuals, such as a person name 
and the telephone number. Therefore, the individual humanity news stored in this individual 
humanity news field should be protected especially from unjust access. 

Actuation of program execution equipment 300 equipped with an above-mentioned 
configuration is explained below <actuation>. 
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[0038] <Interpretation activation actuation> drawing 8 is a flow chart which shows the 
procedure at the time of carrjdng out interpretation activation of the object program which 
program execution equipment 300 downloaded. After program execution equipment 300 
downloads an object program 100 by the communication link with a base transceiver station 
and stores it in memory, it begins interpretation activation. 

[0039] It faces that the program interpretation activation section 301 performs interpretation 
activation of an executive program 101. First the execution time use functional prohibition 
Banking Inspection Department 305 The execution-time use functional information 102 is 
accessed by referring to the attribute information identified with the specific identification 
number of a Java class file. The execution time use functional information 102 is compared 
with the disable table 304 (step SlOl). Either judges whether it is in agreement with the 
fiinction ID matched with the flag of a purport with which use is forbidden in the disable table 
among the functions ID matched with the flag of the purport used in the execution'time use 
fiinctional information 102 (step S102). 

[0040] When it judges with it being in agreement in step S102, the execution-time use 
functional prohibition Banking Inspection Department 305 notifies a halt to the program 
interpretation activation section 301 and the user notification section 307, when it judges 
with program execution equipment 300 performing interpretation activation halt processing 
(step S103), and not being in agreement, step S103 is skipped, and monitor processing is 
carried out continuously (step S104). In addition, interpretation activation halt processing is 
explained later. 

[0041] Here, monitor processing is explained. Drawing 9 is a flow chart which shows the 
monitor processing by the use fiinctional Monitoring Department 302. The program 
interpretation activation section 301 obtains the instruction executed next with reference to a 
program counter, and transmits it to the use functional Monitoring Department 302 (step 
S201). The use functional Monitoring Department 302 judges whether the instruction is a 
data read-out instruction of aload etc. (step S202), and if it is a data read out instruction, 
based on the operand of the instruction, the read- out address which is the location set as the 
read-out object in memory will be acquired (step S203). Even if it is the case where the 
read-out address is specified with the register etc., the actual read-out address is acquired by 
referring to contents values, such as the register in the case of activation of step S203. 
[0042] After acquiring the read-out address, if the read-out address judges whether it is what 
points out the inside of a system area (step S204) and the inside of a system area is pointed 
out, it will tell the execution-time use fiinctional monitor Banking Inspection Department 303 
and the monitor prohibition Banking Inspection Department 306 the fiinction ID of 0x0102, 
and will end monitor processing (step S205). If it judges whether the read-out address will be 
what points out the inside of an individual humanity news field if the inside of a systeni area 
is not pointed out in step S204 (step S206) and the inside of an individual humanity news field 
is pointed out, the function ID of 0x0101 will be told to the execution-time use functional 
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monitor Banking Inspection Department 303 and the monitor prohibition Banking Inspection 
Department 306, and monitor processing will be ended (step S207). 

[0043] If the inside of an individual humanity news field is not pointed out in step S206, the 
function ID of 0x0000 will be told to the execution* time use functional monitor Banking 
Inspection Department 303 and the monitor prohibition Banking Inspection Department 306, 
and monitor processing will be ended (step S208). When the obtained instruction is not a data 
read-out instruction, (step S202) and the use functional Monitoring Department 302 judge 
whether the instruction is a data write-in instruction of astore etc. (step S209), and if it is a 
data write in instruction, based on the operand of the instruction, the write address which is 
the location set as the write-in object in memory will be acquired (step S210). Even if it is the 
case where the write address is specified with the register etc., an actual write address is 
acquired by referring to contents values, such as the register in the case of activation of step 
S210. 

[0044] After acquiring a write address, if the write address judges whether it is what points 
out the inside of a system area (step S211) and the inside of a system area is pointed out, it 
will tell the execution-time use functional monitor Banking Inspection Department 303 and 
the monitor prohibition Banking Inspection Department 306 the function ID of 0x0202, and 
will end monitor processing (step S212). If it judges whether a write address will be what 
points out the inside of an individual humanity news field if the inside of a system area is not 
pointed out in step S211 (step S213) and the inside of an individual humanity news field is 
pointed out, the fimction ID of 0x0201 will be told to the execution-time use functional 
monitor Banking Inspection Department 303 and the monitor prohibition Banking Inspection 
Department 306, and monitor processing will be ended (step S214). 

[0045] If the inside of an individual humanity news field is not pointed out in step S213, the 
function ID of 0x0000 will be told to the execution-time use functional monitor Banking 
Inspection Department 303 and the monitor prohibition Banking Inspection Department 306, 
and monitor processing wiU be ended (step S215). For (step S209) and the use functional 
Monitoring Department 302, the instruction is invoke when the obtained instruction is not a 
data write-in instruction. It judges whether it is the hbrary caU instruction of virtual etc. 
(step S216). If it is a library call instruction, will obtain a library number firom the operand of 
the instruction, and the fiinction ID corresponding to the library number will be acquired by 
referring to the fiinction ID table 310. The function ID is told to the execution- time use 
fiinctional monitor Banking Inspection Department 303 and the monitor prohibition Banking 
Inspection Department 306, and monitor processing is ended (step S217). 

[0046] Moreover, if it is not a library call instruction in step S216, the use functional 
Monitoring Department 302 will tell the execution-time use functional monitor Banking 
Inspection Department 303 and the monitor prohibition Banking Inspection Department 306 
the function ID of 0x0000, and will end monitor processing (step S218). In addition, the 
fiinction ID outputted firom the use functional Monitoring Department 302 can identify now 
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the function ID corresponding to a library call instruction, and the function ID corresponding 
to the other instruction, and that 8 bits of whose high orders are 0x00 among Functions ID is 
presupposing that it is it a thing corresponding to a library call instruction here. 
[0047] Hereafter, it returns to explanation adapted to drawing 8 . The function ID in which 
the execution-time use functional monitor Banking Inspection Department 303 was outputted 
from the use functional Monitoring Department 302 as a result of monitor processing after 
the monitor processing (step S104) mentioned above A compare check with the execution-time 
use functional information 102 is conducted (step S105). The same function ID as the function 
ID outputted as a result of the function ID of the function used with the instruction executed 
after in an executive program 101, i.e., monitor processing, sets to the execution time use 
functional information 102. It judges whether it is matched with the flag of the purport which 
is not used (step S106). Step S106 has the semantics of judging whether it having used the 
frinction it is declared that does not use it using the execution'time use functional information 
102 on the occasion of actual activation. 

[0048] It restricts, when it is the function ID matched with the flag of the purport which the 
function ID outputted as a result of monitor processing in step S106 does not use in the 
execution-time use functional information 102. The execution-time use functional monitor 
Banking Inspection Department 303 notifies a halt to the program interpretation activation 
section 301 and the user notification section 307, and program execution equipment 300 
performs interpretation activation halt processing (step S107). In the case of others, step S107 
is skipped, and the monitor prohibition Banking Inspection Department 306 conducts the 
compare check of the function ID outputted as a result of monitor processing after that, and a 
disable table (step S108). 

[0049] In step S108, the monitor prohibition Banking Inspection Department 306 judges 
whether the same function ID as the function ID outputted as a result of monitor processing 
is matched with the flag of the purport which forbids use in a disable table (step S109). It 
restricts, and when the function ID outputted as a result of monitor processing is the function 
ID matched with the flag of the purport which forbids use in a disable table, a halt is notified 
to the program interpretation activation section 301 and the user notification section 307, 
interpretation activation halt processing carries out (step SllO), and, in the case of others, the 
monitor prohibition Banking Inspection Department 306 skips step SllO as a result of this 
judgment. 

[0050] Then, the program interpretation activation section 301 carries out interpretation 
activation of the instruction which should be executed, the instruction, i.e., the degree, set as 
the object of monitor processing, (step Sill). After processing of Sill is repeated from step 
S104 and interpretation activation of all processings is completed until interpretation 
activation of all processings of the executive program 101 by the program interpretation 
activation section 301 is completed, actuation of program execution equipment is also ended 
(step S112). 
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[0051] Hereafter, interpretation activation halt processing is explained. Drawing 10 is a flow 
chart which shows interpretation activation halt processing. The program interpretation 
activation section 301 which received the notice of a halt sets up the control state by an 
internal variable etc. so that interpretation activation of an executive program may be 
suspended (step S30l), and the user notification section 307 notifies to a user that 
interpretation activation was suspended (step S302). 

[0052] The screen displayed on a display by control of the user notification section 307 in this 
step S302 is shown in drawing 11 . This screen tells the carbon button used when directing 
continuation of activation to a user, while the purport by which activation of the executive 
program 101 whose file name is maze.cj was suspended is shown. 

[0053] After issuing [ of a halt ] a memorandum to the user by the user notification section 
307, the program execution authorization judging section 308 receives and interprets a user's 
input (step S303), and it judges whether it is the input of directions of the purport which 
continues interpretation activation of an executive program 101 (step S304). When it judges 
as directions of continuation of interpretation activation in step S304, the program execution 
authorization judging section 308 directs discharge of a halt of interpretation activation in the 
program interpretation activation section 301, and in response, the program interpretation 
activation section 301 sets up a control state so that a halt of interpretation activation may be 
canceled (step S305). An executive program 101 carries out interpretation activation 
succeedingly by this step S305. 

[0054] Moreover, when it is judged that they are not directions of continuation of 
interpretation activation in step S304, termination of interpretation activation in the 
program interpretation activation section 301 is directed, and in response, the program 
execution authorization judging section 308 sets up a control state in the program 
interpretation activation section 301 so that interpretation activation may be ended. (Step 
S306) . It is lost that interpretation activation of the executive program 101 is henceforth 
carried out by this step S306, and actuation of program execution equipment 300 is ended. 
[0055] <Renewal actuation of disable table> program execution equipment 300 has the 
fiinction which updates a disable table during interpretation activation of a program at the 
time of except. If this fiinction is performed corresponding to predetermined actuation when 
the specific carbon button of a portable telephone is pushed by the user and predetermined 
actuation is performed, the user prohibition assignment input section 309 will be controlled to 
display the disable function selection screen as shown in the display of a portable telephone at 
drawing 12 , and will receive the input about assignment of the disable function by the user. 
[0056] The user prohibition assignment input section 309 displays a functional item etc., as 
shown in drawing 12 , the display of a functional item is scrolled according to a user's specific 
button grabbing, and the disable table 304 is updated so that use of the function to express 
with the functional item by which highlighting is carried out to receiving the carbon button 
input of "1" or "0" may be carried out as authorization or prohibition. 
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[0057] Thereby, a user can define now the fiinction to forbid use. For example, if it is the user 
who considers that it may be read by individual humanity news, it will become possible to 
change the disable table 304 so that use of the function of data read-out firom an individual 
humanity news field may be permitted. 

Although the program execution equipment concerning this invention was explained using 
the gestalt of operation more than the <supplement>, this invention is not restricted to what 
was shown in the gestalt of operation. Namely, with the gestalt of (l) book operation, although 
the address shall be defined fixed, the field in the memory in which individual humanity news 
is stored etc. It supposes that a flag is added for every data of specific size, and becomes 
possible [ enabUng it to identify whether it is individual humanity news or they are the 
information on other with the flag, then also distributing and storing individual humanity 
news in the address of the arbitration in room ]. That is, it is good also as two or more 
individual humanity news fields of the specific size which is not fixed existing. 
[0058] Drawing 13 is drawing showing the example stored so that the data which are 
individual humanity news, and the data which are except individual humanity news may 
become identifiable with a flag in memory. A flag takes the value of 0 or 1, and this drawing 
shows that it is individual humanity news, if a flag is 1. In such a case, suppose that the flag 
added to the data with which the address points [ the read-out address or the write address in 
monitor processing ] out decision (steps S206 and S213) of being the inside of an individual 
humanity news field carries out based on 0 or 1. In addition, it is good also as adding a flag 
which identifies individual humanity news, system data, and other data for every data of 
specific size, then making a judgment (steps S204 and S211) of being the inside of a system 
area by the same approach. 

(2) The partition of the function shown in the disable table 304 or the execution-time use 
functional information 102 grade in the gestalt of this operation may be a mere example, and 
may be other partitions. Moreover, although a function ID table is the table which 
enumerated the functions corresponding to a Hbrary call instruction and it is the information 
which matched with execution-time use functional information 102 the flag of whether it is 
used about all the functions that may be performed with a library call instruction, or not to 
carry out, it is good also as incorporating the information about the function performed with 
other specific instructions which are not library call instructions. However, it is desirable for 
the check of the existence of use of the function to be able to perform simply the fiinction in 
which Function ID is included in a function ID table and execution-time use functional 
information, before program execution. 

[0059] In addition, since the function which can use when an object program calls the library 
usually prepared for the device side by which program execution equipment was carried is the 
function of using the specific resource of the device, if a function ID table is the table which 
enumerated the fiinctions of corresponding for every hbrary, in order to attain the purpose of 
security reservation of avoiding an object program performing risk actuation, it can say 
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becoming with what is suitable. 

(3) Although the gestalt of this operation showed the example which forbids the data output to 
a wireless interface, and the data input from a wireless interface on a disable table (refer to 
drawing 5 ), it is good also as not necessarily having to forbid these and forbidding the data 
I/O to other circuits, and the function reahzed by other Ubrary calls may be forbidden. 
Moreover, it is good also as forbidding the call origination function to the exterior, i.e., the 
function to telephone, instead of forbidding the function of the data input from a wireless 
interface, and the data output to a wireless interface. 

[0060] In addition, it is useful practically to forbid the data I/O which leads a wireless 
interface in the semantics which prevents communicating with the exterior, before a user 
knows. Moreover, it may be useful in the field of prevention of unjust information acquisition 
of tapping etc., and prevention of a troublesome output to forbid the data output to the output 
device in large semantics, such as to forbid the data acquisition from the input device in large 
semantics, such as a carbon button, a switch, a dial, a mouse, a trackball, a joy stick, a 
keyboard, a microphone, a camera, and a sensor, for example, and a display, LED, a lamp, a 
loudspeaker, vibrator. 

[0061] Moreover, although the gestalt of this operation showed the example which forbids the 
data store to data read-out from an individual humanity news field, data read-out from a 
system area, and an individual humanity news field, and the data store to a system area on a 
disable table, these must not necessarily be forbidden and you may make it forbid activation 
of other specific instructions. In addition, it is useful practically from fields, such as privacy 
protection, to forbid access to individual humanity news. 

(4) A user's input shown at step S303 of drawing 10 in the gestalt of this operation is good also 
as being made not only through a carbon button but through other input devices. Moreover, in 
step S303, what a user did not operate may be carried out to interpreting it as what inputted 
specific assignment according to the agreement defined beforehand. For example, if nothing is 
inputted for 30 seconds after the purport which the executive program stopped is displayed on 
a display, the program execution authorization judging section 308 is good also as interpreting 
it as assignment that interpretation activation of the executive program was not continued 
having been made by the user. 

(5) In .case a portable telephone downloads the object program 100 shown in drawing 2 in the 
gestalt of this operation, in order to check the justification of the program storing server 250 
which is the distribution side of the object program 100, it is good also as performing mutual 
recognition etc. 

[0062] Moreover, it is good also as being what is not Umited to this and appUed to other 
household-electric-appliances devices and Personal Digital Assistants although a portable 
telephone shall be equipped with program execution equipment 300 with the gestalt of this 
operation. Moreover, it is good also as an object program being transmitted by approach which 
is not Umited to what also showed the acquisition path of the object program set as the 
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activation object of program execution equipment 300 to drawing 2 , for example, is set to 
Bluetooth, HomeRF, etc. 

(6) Although [ the application program to download, i.e., an object program, / the gestalt of 
this operation ] it is a Java class file, it is not limited to this and is good also as being a 
machine program. In the case of a machine program, the program interpretation activation 
section 301 decides to be CPU, and the use functional Monitoring Department 302 is good also 
as supervising the instruction executed next with reference to each register and memory, 
whenever the register equivalent to the so called program counter changes. 

(7) Although step S306 of drawing 10 shown with the gestalt of this operation only ends 
interpretation activation of an executive program, its step S306 is good also as deleting the 
ended executive program and the execution-time use functional information which 
accompanies this fi-om the inside of the storage of a portable telephone further. Moreover, 
when program execution equipment 300 performs the downloaded object program and it 
progresses to branching of YES at step S112 of drawing 8 , it is good also as adding the next 
processing. The processing is processing for making the object program which activation 
completed applicable [, such as the usual interpreter, 1 to activation after next time, for 
example, can consider the processing which registers the file name of the object program into 
the Ust of safe application programs, the processing which records the information on a 
purport safe for the attribute information on a Java class file. In addition, I hear that 
semantics of saying [ that an object program is set as the activation objects, such as the usual 
interpreter, ] is performed without performing processing for inhibiting activation of unjust 
fiinctions, such as a use functional monitor, and there is. About the program safeties, such as 
an object program which follows, for example, is registered into the list of safe application 
programs, and an object program with which the information on a safe purport was added, 
were guaranteed to be, it is good also as performing the program only using the same function 
as the conventional interpreter, without program execution equipment 300 inhibiting 
activation of an unjust function. 

(8) After the program generation equipment 200 shown with the gestalt of this operation 
generated an object program, although [ equipment ] the function ID of the function which the 
object program uses searches and execution-time use functional information generates, the 
fiinction which will carry out object program use may grasp, and it may generate 
execution- time use fiinctional information in the process which translates to an object 
program in the source program described in C, Java language, etc. 

[0063] Moreover, program generation equipment 200 is good also as enciphering in order to 
protect the execution-time use functional information included in an object program firom the 
alteration in a distribution path. In this case, execution-time use functional information is 
decoded and it is necessary to make it refer to in the program execution equipment 300 side. 
With the gestalt of this operation, (9) In an individual humanity news field As the individual 
humanity news of a person name, the telephone number, and a mail address and others being 
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contained Deciding [ and ] to forbid use of the data store to the individual humanity news field 
by the downloaded object program, or the function of data read-out firom an individual 
humanity news field, the user decided that use of these fiinctions can be changed into 
authorization from prohibition by renewal of a disable table. Thus, it is good also as not 
managing individual humanity news all together, but classifying individual humanity news 
into two or more classification, and managing it for every classification. That is, it is good also 
as classifying an individual humanity news field with the 1st sort individual humanity news 
field, the 2nd sort individual humanity news field, the 3rd sort individual humanity news 
field, etc., and performing data store by this classified object program that downloaded for 
every field, and prohibition of read-out or control of authorization. 

(10) The vocabulary "a halt" used about interpretation activation of an executive program in 
the gestalt of this operation means "suppression" of interpretation activation, when 
performing processing shown in steps SlOl and S102 of drawing 8 before starting of an 
executive program. In addition, though program execution equipment 300 loads each module 
to memory dynamically and performs it at the time of the need, when an executive program 
consists of two or more modules, since it is good and it good also as processing steps 
S101-S103 immediately after loading in this case, it does not necessarily restrict inhibiting 
interpretation activation before starting of an executive program, but the case which 
suspends interpretation activation during activation of an executive program may also 
happen. 

(11) It is good for the screen shown in drawing 11 in the gestalt of this operation also as 
adding useful information to decision by the user of whether to make a halt cancel - whether 
it was stopped in order that an executive program might use which function. 

(12) The computer program for making a household-electric-appliances device, a Personal 
Digital Assistant, etc. which have a program execution function perform procedure (procedure 
shown in drawing 8 - drawing 10 ) of the program execution equipment 300 in the gestalt of 
this operation can be recorded on a record medium, or can be circulated through various 
channels etc., and can also be distributed. There are an IC card, an optical disk, a flexible disk, 
a ROM, etc. in such a record medium. Use is presented with the computer program circulated 
and distributed by carrying out install etc. to a household-electricappHances device, a 
Personal Digital Assistant, etc., and a household-electric-appliances device, a Personal Digital 
Assistant, etc. realize program execution equipment as performed said computer program and 
shown with the gestalt of this operation. 

[0064] 

[Effect of the Invention] The program execution control unit concerning this invention so that 
clearly firom the above explanation It is carried in the device and the program to which the 
use functional information which shows the function which oneself uses among the functional 
groups using the specific resource of said device was added is acquired. An acquisition means 
to be the program execution control unit to perform and to acquire a program firom a channel, 
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It is characterized by having the means for stopping which stops the program execution by 
said activation means in the predetermined case which makes a judgment based on said use 
functional information, and expresses that the decision result of program execution is 
unsuitable as an activation means to perform the acquired program. 

[0065] Since the use functional information that this shows beforehand the function which 
that program uses for a program is added, it becomes possible by using this use functional 
information to secure security by the comparatively simple approach. Namely, it can realize 
[ whether the program uses the function in which use should be forbidden, and ] now by the 
configuration with simple detecting detecting that the program is altered and by referring to 
use functional information by comparing use functional information with actuation of an 
actual program. 

[0066] Said program is that to which said activation means executes the instruction in said 
program including two or more instructions. Moreover, said means for stopping When it is the 
instruction which uses the function which is not shown as a function which supervises the 
instruction used as the candidate for activation to the degree in the program under activation, 
and said instruction uses for it in said use functional information among said functional 
groups, it is good also as stopping said program execution by said activation means. 
[0067] Since the use functional information which shows the function which it is added by this 
to the downloaded program, and the projgram uses will be compared with the result of having 
supervised the function which the program tends to use at the time of actual actuation, it is 
detectable in the difference with use functional information and a program. Therefore, if 
premised on use functional information and a program being what is adjusted in a program 
generate time, that the program is unjustly altered in a channel can detect easily, and it can 
prevent the damage by the program execution altered unjustly 

[0068] Moreover, said use functional information is enciphered and said means for stopping is 
good also as decoding and referring to said use functional information. Thereby, since use 
functional information is enciphered, the alteration of a program becomes detectable easily by 
it becoming difficult to rewrite both a program's and use functional information's unjustly in a 
communication path, consequently investigating the mismatching of a program and use 
functional information. 

[0069] Moreover, said program execution control unit has a prohibition functional storage 
means memorize the prohibition functional information which shows the function forbid use, 
and when the function forbid the use shown in said prohibition functional information is 
shown as a function use it to said use functional information, it is good also as stopping the 
program execution by said activation means in said means for stopping. 

[0070] Since the program execution it is indicated to be to use the function which this has 
determined as what forbids use beforehand firom the reasons of risk etc. is stopped, safety is 
securable by the simple approach of only a comparison of use functional information and 
prohibition functional information. In addition, the suppression which does not perform the 
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program execution itself is also included in a halt here. Moreover, it is good for the function to 
forbid the use which said prohibition functional information shows, also as the function of 
radio being included at least. 

[0071] Thereby, there is possibility of an outflow of extra sensitive information, and making it 
use it freely [ the reasons nil why a communication link tariff may be needed ] to the 
downloaded program can stop the prograrri which uses a radio function with a problem. 
Moreover, it is good for the function to forbid the use which said prohibition functional 
information shows, also as the function of the data output from an output device being 
included at least. 

[0072] It can prevent performing output actuation of the downloaded program displaying 
secret information, such as a password, on a display by this. Moreover, it is good for the 
function to forbid the use which said prohibition functional information shows, also as the 
function of the data acquisition from an input device being included at least. It can prevent 
performing data acquisition actuation of the downloaded program intercepting by acquiring 
data through a microphone by this. 

[0073] Moreover, said program execution control unit is good also as having a prohibition 
functional modification means to receive actuation of a user and to update said prohibition 
functional information further according to said actuation, a user can set up now freely a 
function [ responds to the abiUty of some users not to also consider the function which this has 
determined as what forbids use beforehand from the reasons of risk etc. to be risk, and ] to 
make it use for the downloaded program. 

[0074] Moreover, the program execution control unit concerning this invention An acquisition 
means to be the program execution control unit which acquires and performs the program 
which is carried in a Personal Digital Assistant equipped with the memory which has an 
individual humanity news field, and consists of two or more instructions, and to acquire a 
program from a channel. An activation means to perform the acquired program, and the 
program under activation supervise the instruction which it is going to execute next. When 
said instruction is an instruction which performs data read-out from said individual 
humanity news field, it is characterized by having the means for stopping which stops said 
program execution by said activation means. 

[0075] Since it can prevent the program which is usually memorized by the Personal Digital 
Assistant and downloaded by this the individual humanity news which is the information in 
connection with privacy reading, the outflow of individual humanity news can be prevented. 
Moreover, the program execution control unit concerning this invention An acquisition means 
to be the program execution control unit which acquires and performs the program which is 
carried in a Personal Digital Assistant equipped with the memory which has an individual 
humanity news field, and consists of two or more instructions, and to acquire a program from 
a channel. An activation means to perform the acquired program, and the program under 
activation supervise the instruction which it is going to execute next. When said instruction is 
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an instruction which performs the data store to said individual humanity news field, it is 
characterized by having the means for stopping which stops said program execution by said 
activation means. 

[0076] It can prevent now the program which is usually memorized by the Personal Digital 
Assistant and downloaded by this the individual humanity news which is the information in 
connection with privacy rewriting. Moreover, the program execution control unit concerning 
this invention An acquisition means to be the program execution control unit which acquires 
and performs the program which is carried in a Personal Digital Assistant and consists of two 
or more instructions, and to acquire a program firom a channel. An activation means to 
perform the acquired program, and the program under activation supervise the instruction 
which it is going to execute next. When it is the instruction which calls the functional 
manipulation routine to which said instruction is the functional manipulation routine with 
which said Personal Digital Assistant is equipped, and communicates with the exterior of said 
Personal Digital Assistant, it is characterized by having the means for stopping which stops 
said program execution by said activation means. 

[0077] Here, a functional manipulation routine is the so-called subroutine which exists in the 
execution environment of an application program, is called fi:om the appUcation program, and 
performs a certain processing, for example, is invoke. It is the library program called with the 
library call instruction of virtual etc. It can prevent now using the function in which the 
downloaded program communicates with the exterior of a Personal Digital Assistant by this. 
This is useful at a point with semantics, such as preventing the situation where a 
communication link tariff is needed regardless of an intention of a user arising. 
[0078] Moreover, said functional manipulation routine is good also as being the functional 
manipulation routine which performs data transmission to the exterior of said Personal 
Digital Assistant. Thereby, the outflow of the extra sensitive information from a Personal 
Digital Assistant can be prevented now. Moreover, the program execution control unit 
concerning this invention An acquisition means to be the program execution control unit 
which acquires and performs the program which is carried in a Personal Digital Assistant and 
consists of two or more instructions, and to acquire a program firom a channel. An activation 
means to perform the acquired program, and the program under activation supervise the 
instruction which it is going to execute next. The means for stopping which stops said 
program execution by said activation means when said instruction is the functional 
manipulation routine with which said Personal Digital Assistant is equipped and it is the 
instruction which calls the functional manipulation routine which performs data output from 
the output device with which said Personal Digital Assistant is equipped It is characterized 
by having. 

[0079] It can prevent performing output actuation of the downloaded program displaying 
secret information, such as a password, on the display of a Personal Digital Assistant by this. 
Moreover, the program execution control unit concerning this invention An acquisition means 
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to be the program execution control unit which acquires and performs the program which is 
carried in a Personal Digital Assistant and consists of two or more instructions, and to acquire 
a program from a channel. An activation means to perform the acquired program, and the 
program under activation supervise the instruction which it is going to execute next. The 
means for stopping which stops said program execution by said activation means when said 
instruction is the functional manipulation routine with which said Personal Digital Assistant 
is equipped and it is the instruction which calls the functional manipulation routine which 
performs data acquisition from the input device with which said Personal Digital Assistant is 
equipped It is characterized by having. 

[OO8OI It can prevent performing data acquisition actuation of the downloaded program 
intercepting by this by acquiring data through the microphone with which the Personal 
Digital Assistant was equipped. Moreover, said program execution control unit is still better 
also as having a notice means to notify a user of the stopped purport, when said program 
execution stops by said means for stopping. 

[008 1] Thereby, a user can know now that the downloaded program execution was stopped. 
Moreover, said program execution control unit is still better also as having a halt discharge 
means to receive the input by the user and to cancel a halt according to said input, when said 
program execution stops by said means for stopping. 

[0082] Thereby, a user can cancel [ self decision ] the halt, when program execution is stopped. 
DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing l] It is the block diagram of the program execution equipment 300 grade concerning 
the gestalt of operation of this invention. 

[Drawing 2] It is drawing showing the relation between a portable telephone equipped with 
program execution equipment 300, and the object program for download. 

[Drawing 3] It is drawing showing the DS and the example of contents of a ftinction ID table. 
[Drawing 4l It is drawing showing the DS and the example of contents of execution-time use 
functional information which are added to an object program. 

[Drawing 5l It is drawing showing the DS and the example of contents of the disable table 304. 

[Drawing 6] It is drawing having shown the classification of the field in memory. 

[Drawing 7l It is drawing showing the example of the contents of individual humanity news. 

[Drawing 8] It is the flow chart which shows the procedure at the time of carrying out 

interpretation activation of the object program which program execution equipment 300 

downloaded. 

[Drawing 9l It is the flow chart which shows the monitor processing by the use fimctional 
Monitoring Department 302. 

[Drawing lOl It is the flow chart which shows interpretation activation halt processing. 
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fPr awing 11] It is drawing showing the example of the screen displayed on a display by 
control of the user notification section 307. 

fPrawine 12] It is drawing showing the disable function selection screen controlled so that the 
user prohibition assignment input section 309 displays on the display of a portable telephone. 
[Drawing 13] It is drawing showing the example stored so that the data which are individual 
humanity news, and the data which are except individual humanity news may become 
identifiable with a flag in memory. 
[Description of Notations] 

100 Object Program 

101 Executive Program 

102 Execution-Time Use Functional Information 

200 Program Generation Equipment 

201 Function ID Table 

202 Execution-Time Use Functional Information Generation Section 
300 Program Interpretation Activation Equipment 

300 Program Execution Equipment 

301 Program Interpretation Activation Section 

302 Use Functional IVIonitoring Department 

303 Execution-Time Use Functional Monitor Banking Inspection Department 

304 Disable Table 

305 Execution-Time Use Functional Prohibition Banking Inspection Department 

306 Monitor Prohibition Banking Inspection Department 

307 User .Notification Section 

308 Program Execution Authorization Judging Section 

309 User Prohibition Assignment Input Section 

310 Function ID Table 



* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the 
original precisely. 

2. **** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 
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^^^Uix-X^^^Crt^fiim^-rS C i: t J;-pT*|^ 
©«iiTFbX*SSj^-r^o 

[0 0 4 4] F UX^^JffLfc^. ^cD»jiT F 

bX a i/Xx A® igErt ^3fr ©T'^ ^ *^§*^*fiJS b 

(Xx^y^S 2 11). v'XxAMiirt^ii-r^^tOT'fe 

ntso X 0 2 0 2 i^v^^^tg I D^mn^mmm^m. 

m^mjt^ (Xr-yT'S 2 1 2) o Xx'y:^S 2 1 1 
fcfe(/^T'>X-rAfflig5rt*Ji-rt><Df *ttntf. 
F bXtiliAlf ^^^f^^Jg-r fe® T'^^S *^S*^>&¥iJ^ 
U (X-r>yys 2 13). •dAffi^M^rt^fg-rfecOT' 

fentf 0 xozo iti^^mmi D^mymmmmmm. 

^^SgP3 0 3RZS^Um±^M^3 0 6 fc^^TlS^ 
MS^^7-r^ (XT-y:/S 2 1 4) o 
[0 0 4 5] Xx-yT'S 2 1 3tcfel/^T<aA1f^migrt 

^Ji-r*>©-e:&ttnff. 0x000 0 i:v>5:ifii i 
mnm^mmm^wikm^3o 3Rzs^um±^Mm 
oGKBxrm.mmm^m'r^ (xx>y^s 2 1 

5) o t#/-c^^*^x-^»3ii,^^T'*t/^i^-&fcfi (XX 
•y:/'S 2 0 9) . {Sfflatg^^gP^ 0 2tt^<D^^*^ i 
nvoke v i t t u a l^oy'y^y'^V^iH^'vX 
h^i^^m^mmL (Xx'y^S2 16). ^-C^^^V 

^m^v^tiifs ^ y F *^ & ^-r 

'JH^^ffT. ^^(D'y^zr'yVmmcfiltt^mm I D 
^tiHgl Dx-:r;l/3 1 omB§-r-5iii:t<tf)^ff b 

T. ^©titg I D^m7mmmnmimM.^3 o 3s 
t;^«^iJ:^3tsi53 0 6 \ci^^xmiii^m^mTt^ 

(Xx-y:/S 2 1 7) 0 

[0 0 4 6] $/c:. Xx>yys 2 1 6 (c*3l/^T-7'l':/v 
Ui¥ffl^'^T'*t:^ntf. ^fflilt6g:Sg|53 0 2{i. Ox 

0 0 0 0 I D:^mnmmmm^m^.Mm3 
0 3Rvmmm±m^m o e tce^r^ms^MT 
(xx-y:/s 2 1 8) o fj:^. mmm^m.^3 0 
2ft>6m:^?nsijtgi--Dtt. ^-i':r^uiifai^fc^ 

•5 ^±ffi 8 e «y F 3b^ 0 x 0 0 fe <D3b^7-r U i¥ 
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[0 0 4 7] i:i~fs msicmbtcmmicm^o ±^Lrc 
(x-r-y:/s 1 0 4) mnmmmmm. 

3 0 2*>?.ffi;^7*nfcaftg I D mn^mmmmm 
1 0 2 i:<?)tfc^^$^fTi/^ ut-vt's 10 5) . mn 

-fu^fvh. 1 0 1 tfKOi^fcHfT^ns^^k: j;oT^^ 

nfc^tg I D fciii-©^fti I D*^gifT^^«itgif^ 1 

0 2 fcfei^r^^ffl L*i/^g©7 7 i^i:5>t^s^^f p. nro^ 

5*>S!b^^ipJS'r5 (XT-y:/S 1 0 6) o Xr'y:/S 

1 0 6 Hfr^ffl^ftglf ^ 1 0 2 (c J: o T^ffl L^S: 

[0 0 4 8] xr^y^^'s 1 0 6 icfei^r^msaaoiK* 

}L LTfflt)?n/c)Stg I DA^Htf^i^atglf ^ 1 0 2 

3 0 3 itfuf'yhjmmiv^z 0 1 ;Ri;^-+fjiagi5 

3 0 7 (cffil:^ffiaL>^P^"7A^f5^«3 0 Oti^f? 
^ff^±®S^fTl.^ (Xr-y^S 10 7). ^(^fmrn 

mm^t Lrmtittircmm i d tmm±7—-:r)i, 

t <Dit«^^4^^^«ih^4g|5 3 0 6 *^tT d (X X y 
S 1 08) o 

[0 0 4 9] Xr-y:/S 1 0 8 {cfet,^Ttt^^^jh1^S 

353 0 eimmmrnommtLxiati-^nfcmm i oii 

(Xx-vT'S 1 0 9) o il(D|iJ^£O^II. ^ffijaSO^ 
vAg?i?^tTgi53 0 1 &a':x-1fiiBgP3 0 7 lcW±^ 

m^Lfmm7W±mm^m^ (xx-y:^s 1 1 o) . 

Co 0 5 0] M(/^T. ^^i5Qa©)i>f^i:*r5fc#^in-5 

^tsif7?n^'^t^^^yDif^A^s?iitTgi53 0 1 
ii^mmnt^ CX-f >y:/S l l O o :/ay^A^«? 

iitTgi53 0 1 ti;5SitT:/p^*vA 1 0 1 (D±x(Dmm. 

<D»«Rlltf*^^7-r^ST'Xx7:/S 1 0 4*^^S 1 1 
1 1 2) „ 

[00 5 1] IXTs PIRIIfTff±Wco(/^Ti{iB^-r 
T'feSo f?lJ:©S^*§ttfcyny^A^f?|ltfg|53 0 

1 itmi^xn ^'^L.(DmmMn^ififr^ <fc 3 fci^ggis© 
mmici^^mm^m^m^L (xx-y/sso o . 
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"^ficmmt^ (xt-vt's 302)0 

[0 0 5 2] !l(DXf-yfS 3 0 2 tciott^a— »f Jffil 

3 0 7 «^Mc i o x:/ w tcg^^nsBffl 

;l/^*^m a z e . c j T'fe^llfTt/P A 1 0 1 

[0 0 5 3] n.-- tfS^gps 0 7 \ci:^3.~-^^(DW± 
10 ®3lS<D^fc :/p A*tT?F5IfiJ^g|5 3 0 8 >f 
<OA:^>=&§ltmt^L (Xxy:/S 3 0 3). 
u^=yK 1 0 l©^lltf%^MfSg©lt^<DA;t;T' 
^■^'b'^'bmmt^ (Xx-v^S 3 0 4) „ Xx-yy 

s 3 0 4 K^\^^xmmm'i<rMm>wr^}Lm\\^n.^ 

»Ctt:/py^ASI?TiFRl!pMg|53 0 8 {i>^D^^^AfiPK 

•mim 0 1 ^c^f^||^T^D^#±©^^*m^L. 

§itTyp^*vA)||JK^fgP3 0 1 {i^3§?*tf®f#iJ:% 
fint-r 5 i 3 fcMSHl^^^H^-r 5 (Xx -y 3 0 

5) o CiDXf--y7°S 3 0 5lc<t'3llfT7'py^Al 0 
20 ia§ltMv^TglS?^t7?n§t><0i:*§o 

[0 0 5 4] $fcXT-y:/S 3 0 4{CfeV^T^|RfltfiO 

Rlf'J^gP3 Ql^Xt-fXi^^yhmm^UZ 0 1 tc^)^^ 

3 0 1 \tmmim:i't^i^b\m'mmM.-t 

(Xx-y:/S 3 0 6) o CtDX-r-y:^S 3 0 6t<fc 
D^tT^P^vA 1 0 1 ai^^i?IRlltf*n§il^;fi:& 
< 0 . ^P i'*^ AHlT^a 3 0 0 <7)K{^a$|7-r 
CO 0 5 5] <'^^±x-:7;l/SSfi&f^>:^ay^A 
30 ^fT^H3 0 o«. :/p^^A©^f?iifT*j;^^i-®mc 

yff'W^^i^.fd^^mm%mf\c.n^^^xmi-^ic\^ 

■ 353 O9a^^«Sa<Dxi'X7°U'l'lc01 2fc^'r<t 

So 

[0 0 5 6] 3 0 9 (i. 0 1 2 

smc;si;riifigas©a^^x^p-;i/$-&. sfc 
rij roj ©#^?yA:^3^gw>fit^i:?siig^ 

«=RrXtt«iJ:i:-rsi3k:^^±T-:7;l/3 0 4*M 

[0 0 5 7] cntciD. <^«:«±-r5Sitg^a— r 

50 ^^x-y;l/3 0 4*^M-r5C iljb^RltEfc^So 
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(1) trnmrnmr-ii. mAmtai^m-^ti^y^^v 

s ffl Aft ^tt y * U SraP^®ffilctO TY]yX\ci>^WLL 
xmit^CiLm^trs.:ho o$DHS6gT'^i/>!it^ 10 

[OO5 8] 013{i. ;<^Urtfc{@A1f^T:-$.'?.-r- 

^5? i: mxmn^A^xh^ r- 7 ^ y t ^ o riggiiBj 

T'{i7^i^{iO 1 7'7i^'A^ 1 x^n\.f.m 

A1f^T'fe-l.t:i:^g^LTv^5o coi^^^tti, 

1f^MiSl^>^)>SA^cD!pM (Xr^y^S 2 0 6. S 2 1 

3) t<DT YUT.hm-fr—^Km^-^nfcy'y^ 20 

S'J-r § o fi^y^^m^^-^ XOt'- ^Slcf^fio-r 
(Omm (7.Ty:f S 2 0 4. S2 1 I) :^i>nr>Ctt 

1 0 2^c{i7'^'7■7';|fffi#^^ca:^^ll^T?t^^#^ikT 

[0 0 5 9] ;&*3. :/d i'*'7A||f7^S*^if «S 40 

(3) *liai(7)}g||T'{i. ■(^^±x-7;V (05# 
y:?7x-7.*^5<0x-^rA*%SjJ:'r5fiRJJg^Ufc 50 



#112 0 0 2-4 1 1 7 0 
16 

mm^m±br%x\,\ ^tc. S8^-r:/^7x-7.*^ 

6 Or- ^ A^jRtf^'l' 7 X -X'NfiOx-^Jf IB:^ 
[0 0 6 0] *^3. Mi^l'>^7x-X*®UT<Dx- 

fsi-'y. ■ty•9■||^0/2;^^M*T■^DA:^)T>'WXA^P) 

[0 0 6 1] sfc. **2S6®j^^T'{i. ^mn±7—y 

A^^©x-^Mai^ '(@Atf^Mi^'\©r-^'»jARi;>' 

^*5. ■fSAIi^^^OTi'-trx^^ih^^iiiia. 7° 

(4) *^<D^^JC*3V^T0 1 OOXt^^v^S 3 0 3 

^UT.^ffhXiS.-^ti^hCttLX'tiiX^^ ^tc. 
-yy S 3 0 3 fc43i/^T«s ^i6^i66nfc5^}*a6^ct«£-p 

tiLtct>(Dtmmt^ctlcLX'LJ;n^\ Htf 

&3 o©r^{srfeA:^jL^ttn(f. :/o^*^AiifTfFRiw 
^§153 0 8it^(Dmnyu^^i.o:)m^m7(omm^n 

5 }g«)b^rL— If jc J; 0 ft * nfc tfmt^s, n 
iltLX^i:\,\ 

(5) *^M©}g®t*3t/^T0 2fc^bfc:4-7"2^x^h 
•/uif^l. 1 0 0^»^«Kil*^^^''i7>'P- K-r^^fc 
tt> ^®;i-7"$^x^ h:/py^A 1 0 OtOgafHllT'feS 

7'pi'*7Ai!&^+)--/^2 5 ocDjEmit^mm-r^rctb. 
[0 0 6 2] ttcs :$:mm<mmxii. zfu'^^i.mn 

^icmm-^n?>i,cDX'^^c ttLx^xi\ r^. 

:/P^^AgltT^M3 0 0(DmnMmiltS:^:tzri^:s:^ 
h T'P ^•^ A toajff iS^ 1 0 2 IC^ L Tfe ©tc PIS^ n 
^t:i:ttft<. mtfB luetooth. HomeR 
Fmic^tf)^nxl^^i:o1i:&mX:tyi^jLi7hfx:iif 
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(6) :mm<Dmmr'ii. ^'^yv3-}'t^T-/v'r~ 
§153 0 uicpux'&^cttu mmmm^m^3 o 

(7) t:mm<OBmr*^Lrzmi 0<O7.7-yfS 3 0 6 

1 1 2T*YE s©$^lK^cii^/•c«#^c^3^>r. i^osas 

(OtfiP:!. ^Vfxn ^7 A<07 ri'^V^S^Sr^^T-feS 7 
J a V a^7X7r-r;l'©7hUe:i-h1f^{cS^T' 

'J H y T'D ^-•7 AcD u X h fcs^^ nr ^ § 7^ so 

^Atov^Tfis T^P^'-^A^tf^SS 0 Ojb^^IE^a 

(Dmm(D^^m^^x^(D-fu v^i^^mnt^ct t l 

(8) 2^Sgi7)m|-e^Lfc:/P^'*^A^^g«2 0 0 

xm'nfmmmmmn^^i^t^ctthrch\ cnm 40 
'^x^^ ^yp^'•^A^cSiR•r•5^i@^^:^ot.^T. ^■©:t:r 

[0 0 6 3] */c:. :/P^7'^A*figge2 0 Ott. 
S^x^'h:/PiJ'*-7At#i6:5^ff^<^ffl:^iltf^^. SB 

i:LTfe<fcl.^o CCD«^fca-/py^A^t?g«3 0 0 

SiJSA^feSo 50 
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(9) :^mm(DBmx'ii. mAmmmicii. a^s^. 
\cii^mAm^m'^(07'-'S'mTi,ximAm^mi)' 

tco !l(D^^lcmAmm:t>ti^tiblcmmt^<D'Xii 

^ < ^ mAmm^m^<omwncK'»Lxmwmicmmir 

i!ittLX^^i,\ m^. {BAIf^^^^^lSfiA 

mmmm. mzmmA^mmm. msmmAm^mm 

/c^>^->'x^ h:/p^/*7Afca;§x-^»ii-^^ai<0^ 

(10) i^m<omm\cis\^^xmn-:^r3if^h(Dfmm: 
ys 1 0 K. s 1 ozic^Ltcmmm^mnyrj^^^i. 

§0 ^fcs *tf:^P^7A*^agS[<7)t>;a-;l/^,>c,^^ 

?n^«-&fcfcv^r:/p^*^AiitT^H3 0 o*^#^i^ 
-jv^smmcmmc t u ic p - f l thr-t § 

Lrt>J:<. (l(!Dil^fcttP-KE^fcXT<y:/S 1 0 

i~s 1 0 3(Dmm^n^cttLxi,i.i^^<DX\ <£j.-f 

L fe*tT:/p AcDiaijtQfc^iRiifT^&ajib-r s « 

(11) *S]6£©J^|g(c4oi/^Ta 1 Ifc^tfciaffitc 
tt> ^tT:/P ^^••7AA^H©^t6^igffi-r§ C i;lc:Q:5fc 

(12) :mm<DBmic^i>f^ v^yKmn^m 3 0 
ocomm^m (hs-^i oicmhrcmm') ^> zfm 

ii. ai^^n^c3ytfi-^f:?^p^^A{i. 

^' y X h c i: fc J; 0 spjffl 

- yp ^'••7 A^^fT L x:mm<ommxm l^c i ^ 
:/p A^tT^s^^^-rs, 

[0 0 6 4] 

^A^S{#LT. mi^t^ya^^i.mmm^X'& 
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[0 0 6 5] cnicX*). ^i67°py^Afc. ^oya 
[0 0 6 6] -^fz. MfS:/Pi^vA{i^tS(©^^^^ 

mm(n^%mwmm^'m&\c^\^^x>m-t^m^h 20' 

[00 6 7] cnicjci^s ^'>>'D-KLfc7'D:y.^A 

[0 0 6 8] Sfc. BylS^fflaHglf^aBf^ft^nT^S 

[0 0 6 9] Hu1B:/p^^^A*fT»^«tt. 

tgiH«^g^fii^v MISff±¥©{±> MfHS±iltl1fS 

©fciST'pi'-^AW^fT^rlf^^-itS i: LTt * 
[0 0 7 0] cinfcj;!?. t:B^fiDSift>p,^^^>^^Jg: 50 
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[007 1] iinfc i g^Si©8iitti©Rr«itt)b^fe 

:?'i;yp-Kbfc7'p^^^Atgfitc<slffi$-(ir5 

®ttPcg®*^fes^^5im«ifig^Mffi-r«:/p y v A^f? 

[007 2] cntciD^ 3?'>:/n-Kb.fcyp^^^A 

yp Aib^v-f i^^JlUrr-^^^^^LrSte^grff 

■So 

[0 0 7 3] *fc. MfS^py^AHfT^JP^Wi^ft 

«± -r § t> © i: ^ 46 T 1/ > § atl o 1/ ^ T fe ^- +f J; o 
yp- KLfc:/P^5AtMffl^-&fc<*t.^Slfii^^- 

[0 0 7 4] ^Tc. ^mmm^-fu^'^Kmmm^ 
m\t. mxmnmm^mt 1 t § ^^if iw 

L.^mit^mi^mt. ^f7c?<o:/py5A*^:^tii 

[0 0 7 5] cnfc<tt). ^^ff^i^*ta#i2t$n 

t^(Dx\ mKmm.(Dmmm^±xt^iio\cr^^, $ 

^Sj<d#^*^ ?> * 5 :/p ^5 A^ffiif b TUtr-r s :/p 
i''^ AUfffijgiiggr'fe -3 T. mmm-^ 5. >^p ^7 a^ 
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[0 0 7 6] cruci:^. m^mrnQmcmnrnm-^n 

}^Ltcftt f=7 t ^x. 5 c <- c i: 

[00 7 7] c c T\ mmmm?iy-i^yt ar^v 20 

fci«>S-9-:/;l/-^>-efeDs flj^ti* invoke v i 
r tua l«c07-Y:/'7'Jiftii^'^fcJ;Dfl?D°(JB?nS 

[0 0 7 8] $/c. BufBlitgSQa;V-^y«tulH^mif 30 

fc i 5 H>jl3:/p y ^ A tDllff^ff i; ^ 

[0 0 7 9] <ltHcXK>. ^t/yu-YX^tcrfuff^yK 
A^T't^o $/c^ *5lBJti^;5P^Pi'*^A^fT$'J®i^« 

'f=7hnr^%\^xmi-t^-fxi'f'yKmTmmmx^ 50 
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^T. ®m^A^5.:/p^*5A%3?^-r55{^¥l9:ii. 
mbfcyp^'^A^^tTtS^fr^Si:. UtTPf'toyp 
i^-^AA^^^lcHtTLi^ii-rs^^^^^U MIB^^ 

MIB^tT^ gfc J; -5 BuiSy P i^*^ AOlltf *#±^ -Its 
[0 0 8 0] cmtci"?. ^'-i/yp-KLfc^P^vA 

•rSiliA^T't;^, Sfc. SulET^py^A^tTfiM^a 

[0 08 1] cn^cj;'?. n— fti^-i/yp-KLfcT" 
P i'*^ A(D*fTA^#±5 n^c il ^ ^SIS e i ^^t? t « i 
dfc*:So *fc. HUB3:/py^A*ff$iitJ^B{iSC. 

fc^ HSf3f#±^IS}cj;oTtufB^Pi^5AO*fTAW 

[0 0 8 2] cnicit). rt— tf{i:/D^^AO^tT*^ 
3 0 O^®@^0-Z?feSo 

[02] :/py^All^T^fg3oo^^l^ssl««e)^ 

[03] I Dx-:/;l/©x-^^igRtfi^gM^^ 
[0 4 ] ;t:^>''x ^ h yp ^^^^ AtcMiipSnsH^f 
[05] <^Mlfc-r-r;l/3 0 4®T-^«iiSCfF«3§ 

[07] {@Aff^<oi^^omM^^-r0T'^So 

[08] :/P ^'^ AH^tSBS 0 0 if^^ti yp- F Lfc 

3j-7>>x ^ h :/p A^^SRH^f -rsstcfett-saia 
^lii^^f :7P-5^i'- F -r-feSo 

[09] <^iltgi£^a53 0 2fci5^««ia^5^t7 

P— hT-Siio 

[010] M«Rlltff#±J!ia%^-r7P-9^^-hT'fe 

•So 

[011] OL— tfa^gps 0 7®$ijiifc<t»)X'rx:/u 
•Yfc^^^ns®®<^)M*^-r0T'fe§o 
[012] ^-^f«±ji^A^»gP3 0 <dif^^%mm> 
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